confirm current password when editing a user